Submission Details
Severity:
return value of ECDSA.recover unchecked
Summary
The return value of ECDSA.recover() should be checked for the zero address in sendToL1() inside the bridge contract.
Vulnerability Details
Checking if the return value is not the zero address should be an invariant.
Impact
Missing invariant check.
Tools Used
Manual review.
Recommendations
Check that the address is not the zero address.
Rewards breakdown
nSLOC
99This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.